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(54) Security system 

(57) A security system for preventing unauthorized 
use, entrance or the like, comprises a number of secure 
devices, each of the secure devices comprising a chip 
with logic circuitry having a function in providing author- 

U 



ization to the security system. In at least a part of the 
secure devices the chip of a secure device is provided 
with a unique chip layout. 
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Description 

[0001 ] The present invention relates to a security sys- 
tem for preventing unauthorized use, entrance or the 
like, comprising a number of secure devices, each of 5 
said secure devices comprising a chip with logic cir- 
cuitry having a function in providing authorization to the 
security system. 

[0002] Security systems of the above-mentioned type 
are used in many applications, such as for example to 
prevent unauthorized access to secured rooms, in pay 
tv applications, in banking systems etc. The security 
devices used are generally made as so-called smart 
cards comprising a chip. It will be clear that in view of 
the many smart cards provided to many different per- 
sons, security sytems of this type are open to attack by 
pirates or defrauders. Attacking a smart card currently 
involves a process, wherein during an analysis phase 
the chip of the smart card is probed to find a means of 
attack. In this process of attacking the layout of the chip 
is analysed to identify the appropriate probe points to 
access the data contained in the chip. Thereafter the 
attack is planned in a preparation phase and finally the 
contents of the chip are extracted in the actual attack 
phase. White the first and second steps typically take 
months, the third step can be performed in under a day. 
This means that once a smart card has been cracked 
for the first time, any second attack is relatively easy. It 
will be clear that this is a serious problem in security 
systems. For, once a smart card has been identified as 
being broken and has been disabled by the controlling 
system, the pirate can crack another card in a repeated 
attack within a relatively short period and thereby con- 
tinue with piracy or fraud. 

[0003] Moreover, the smart cards used in prior art 
security systems are generally provided with a chip with 
the same basic silicon layout, even when used in differ- 
ent applications. If for example a smart card of a specific 
type is hacked for its banking information, the knowl- 
edge obtained by hacking this banking card can also be 
used to extract the secure information from the same 
type of card when it is used in a different application, for 
example in a pay television system. 
[0004] The invention aims to provide a security system 
of the above-mentioned type wherein the vulnerability 
for an attack by a pirate is significantly decreased and 
wherein the time required for a repeated attack of the 
secure device is substantially increased. 
[0005] To this end the invention provides a security 
system of the above-mentioned type, characterized in 
that in at least a part of said secure devices, the chip of 
a secure device is provided with a unique chip layout. 
[0006] In this manner a security system is obtained 
wherein at least a part but preferably all secure devices 
are provided with a chip with a random layout of the 
logic circuitry of the secure device. This means that the 
hardware implemention of the secure functionality of the 
secure device varies from device to device. 
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[0007] According to a preferred embodiment at least 
said logic circuitry of the chips of said part of the secure 
devices is implemented in FPGA technology, wherein 
the layout is programmed in the FPGA circuitry either in 
a volatile or non-volatile manner. 
[0003] The invention further provides a set of secure 
devices to be used in a security system of the invention, 
wherein each of said secure devices comprises a chip 
with logic circuitry having a function in providing author- 
ization to the holder of a secure device, wherein in at 
least a part of said secure devices, the chip of each 
secure device is provided with a unique chip layout. 
[0009] Finally, the invention provides a method for 
manufacturing a secure device for the the security sys- 
tem of the invention, wherein secure devices with a chip 
are used, said chips having logic circuitry having a func- 
tion in providing authorization to the security system, 
wherein in at least a part of said secure devices the chip 
of a secure device is provided with a unique chip layout. 
[001 0] The invention will be further explained by refer- 
ence to the drawings, in which an embodiment of the 
system and method of the invention are schematically 
shown. 

Fig. 1 schematically shows a pay tv system com- 
prising an embodiment of a security system of the 
invention. 

Fig. 2 schematically shows the internal structure of 
a smart card used as secure device in the system of 
fig. 1. 

Fig. 3 shows a diagram of an embodiment of the 
method of the invention. 

[0011] Fig. 1 shows merely by way of example a 
broadcasting system wherein three broadcasters 1-3 
are coupled with a multiplexer unit 4. The multiplexer 
unit 4 comprises means for scrambling, encoding and 
compressing broadcast signals provided by the broad- 
casters 1 -3 and the thus obtained digital data streams 
are multiplexed into a digital transport stream. In the 
embodiment shown this digital transport stream is mod- 
ulated by way of modulator 5 before transmission. The 
operator of the equipment including the multiplexer unit 
4 and modulator 5 is responsible for transmitting the sig- 
nal to the receiving equipment of the public, one televi- 
sion set 6 being shown by way of example in fig. 1 . One 
or more of the broadcasters 1 -3 may be private broad- 
casters operating according to the concept of pay tv 
which implies subscription. This means that people 
wishing to view programs broadcasted by a particular 
broadcaster, have to subscribe to such a broadcast and 
pay the appropriate fee. 

[001 2] As schematically indicated the transmission of 
the signal may be carried out through one or more tele- 
communication channels including a satellite link 7, ter- 
restrial fink 8 or a cable system 9. 
[001 3] Access to anyone of the broadcast signals pro- 
vided by the broadcasters 1-3 requires a decoder 10 
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generally including a conditional access module not 
shown cooperating with a smart card 1 1 in a manner 
known per se. The smart card 1 1 is one of the secure 
devices of a security system implemented in the broad- 
casting system shown in fig. 1 to prevent unauthorized 
access to pay tv signals by persons which did not sub- 
scribe to the broadcast. Each subscriber is provided 
with a smart card 1 1 , each smart card 1 1 having a 
unique key and/or address. This security system may 
operate for example in a manner known per se using 
ECM's and EMM's to provide access to the pay tv sig- 
nals to authorized persons having a smart card 1 1 with 
means tor providing authorization to the security sys- 
tem. 

[0014] As explained above, such a security system is 
open to attack by pirates trying to copy an original smart 
card to thereby provide a large number of pirate smart 
cards. In order to substantially increase the time 
required for a repeated attack on a smart card, the 
security system described is provided with secure 
devices or smart cards 11, each of the smart cards 
comprising a chip with logic circuitry having a function in 
providing authorization to the system in a conventional 
manner. The logic circuitry may include the circuitry to 
store a unique key, and/or the algorithms and logic 
required to provide authorization, for example the algo- 
rithm to decrypt the key hierarchy used in a security sys- 
tem such as eurocrypt 

[0015] Fig. 2 shows in a very schematic manner the 
internal structure of a smart card 1 1 showing that the 
chip of the smart card 1 1 includes a central processing 
unit 12, an EEPROM circuit 13, a RAM circuit 14 a 
secure cell 15 and random bus and logic circuitry 16. In 
the embodiment described the unique circuit layout is 
provided only in the secure cell 15, in which for example 
a cryptographic engine and a volatile storage element 
for storing a secret key are located. For a further expla- 
nation of this structure of a smart card reference is 
made to European Patent Application 97202854.2 of 
the same applicant. 

[0016] According to a preferred embodiment the 
secure cell is implemented in FPGA technology (field 
programmable gate array). The FPGA circuit of the 
secure cell 15 is programmed in a usual manner in 
accordance with the diagram of fig. 3 to personalize the 
smart card. In order to personalize a smart card 1 1 , 
unique information is stored in the secure cell, this 
unique information comprising a unique key, a key 
decryption algorithm used in the security system or the 
like. Usually an FPGA is programmed as follows. First 
the unique information for personalization is written in a 
high level language, for example C or VHDL The high 
level language is first compiled. Thereafter the informa- 
tion is put through a synthesis tool which generates a 
logic implementation of the high level language code. 
This logic implementation would generally include logic 
circuitry such as AND gates, OR gates, D latches etc., 
which are combined to produce the correct crypto- 
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graphic functionality. Thereafter the logic implementa- 
tion is put through a routing program which constructs 
the actual program file for a particular FPGA. This file 
will specify which ceils are interconnected within the 

5 FPGA and how each cell is programmed. The actual 
program file is then loaded into the FPGA circuit on 
power up or fuse blown into the FPGA depending on the 
particular FPGA technology used. 
[0017] Generally a synthesis tool can produce many 

10 variations of the same functionality. In prior art applica- 
tions the synthesis tool is designed to produce logic 
which utilizes the minimum number of gates, shows an 
optimal power efficiency, has the best speed perform- 
ance or a compromise of the above. 

15 [0018] According to the present invention a variation 
factor, for example a random number, is introduced into 
the synthesis tool such that the layout provided by the 
synthesis tool will vary from chip to chip. As schemati- 
cally shown in the diagram of fig. 3, a variation factor, 

20 such as a random number is fed into the synthesis tool 
and this results in the tool generating a set of logic 
which is unique to that variation factor. A new variation 
factor is used for personalizing each of the smart cards 
1 1 of the security system. In this manner it is obtained 

25 that each smart card 1 1 of the security system has a 
unique layout of the logic circuitry of the secure cell 1 5. 
[0019] Similarly a variation factor can be fed into the 
layout tool resulting in a further randomizing of the lay- 
out of the logic circuitry. 

30 [0020] Further it is possible to introduce a variation 
factor in the compilation step, so that the input to the 
synthesis tool will receive a varying input. All possible 
variations can be used either separately or in combina- 
tion. 

35 [0021] Using the method of the invention the person- . 
alization step introducing a unique key, the logic imple- 
mentation of the key and/or the decryption functions into 
the smart card 11. will result in a layout of the logic cir- 
cuitry which is unique to each smart card 1 1 . In this 
40 manner it is obtained that the time needed for each 
attack of a security system is substantially increased as 
the pirate can not use the information obtained in an 
analysis phase and a preparation phase in an attack of 
a first smart card, in attacking another smart card. 
45 [0022] As an alternative, instead of using FPGA tech- 
nology in the secure cell only, more parts of the chip or 
the entire chip of the smart card can be built using 
FPGA techniques and can then be randomized in the 
above described manner. 
so [0023] In a preferred embodiment a volatile FPGA is 
used, wherein the FPGA program is stored in RAM 14 
of the smart card 1 1 , which is powered by a battery just 
as the volatile storage of the key in the secure cell 15. 
Including defense traps as known per se in the smart 
55 card chip will result in a loss of the contents of the RAM 
memory and the volatile storage of the secure cell 15 if 
a pirate fails to overcome thew defense strategy of the 
chip. Thereby the programming of the FPGA circuitry 
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will be lossed. In this manner it is obtained that by 
attacking a card no information is gathered on how to 
attack a next card. 

[0024] Although the invention is explained in the 
above by reference to a pay tv system, the security sys- 
tem of the invention can be used in any security system 
using secure devices for providing authority to the 
holder of the secure device, such as security systems 
used to protect rooms, buildings, or the like against 
unauthorized entrance, banking cards etc. Further, 
although it is preferred to provide each smart card with 
a unique layout it is also possible to provide groups of 
cards with a unique layout. 

[0025] The invention is therefore not restricted to the 
above described embodiment which can be varied in a 
number of ways within the scope of the claims. 

Claims 

1. Security system for preventing unauthorized use, 
entrance or the like, comprising a number of secure 
devices, each of said secure devices comprising a 
chip with logic circuitry having a function in provid- 
ing authorization to the security system, character- 
ized in that in at least a part of said secure devices, 
the chip of a secure device is provided with a 
unique chip layout. 

2. Security system according to claim 1, wherein at 
least said logic circuitry of the chips of said part of 
the secure devices is implemented in FPGA tech- 
nology, wherein the layout is programmed in the 
FPGA circuitry either in a volatile or non-volatile 
manner. 

3. Security system according to claim 2, wherein the 
logic circuitry of each secure device chip is pro- 
vided in a secure cell of the chip. 
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7. A set according to claim 6, wherein at least said 
logic circuitry of the chips of said part of the secure 
devices is implemented in FPGA technology, 
wherein the layout is programmed in the FPGA cir- 
cuitry either in a volatile or non-volatile manner. 

8. Method for manufacturing a secure device for a 
security system according to anyone of claims 1-5 
or for a set of secure devices according to claim 6 or 
7, wherein secure devices with a chip are used, 
said chips having logic circuitry having a function in 
providing authorization to the security system, 
wherein in at least a part of said secure devices, the 
chip of a secure device is provided with a unique 
chip layout. 

9. Method according to claim 8, wherein chips with 
logic circuitry in FPGA technology are use, said 
method comprising the steps of programming a 
unique information in the logic circuitry by means of 
synthesis tool and a layout tool, wherein for each 
secure device of said part of secure devices, a var- 
iation factor is introduced in at least one of the syn- 
thesis tool and the layout tool, thereby providing a 
unique circuit layout. 

10. Method according to claim 9, wherein the synthesis 
tool is provided with input information compiled 
from a high level language code, wherein a varia- 
tion factor is introduced in at least one of the compi- 
lation step of the high level language code, the 
synthesis tool and the layout tool. 



Security system according to claim 1, wherein the 
complete secure device chip is implemented in 
FPGA technology, wherein the layout is pro- 
grammed in the chip either in a volatile or non-vola- 
tile manner. 

Security system according to claim 2, 3 or 4, 
wherein the logic circuitry or the entire chip is made 
as a volatile programmable FPGA, wherein the 
FPGA program is stored in a battery powered RAM. 

A set of secure devices to be used in a security sys- 
tem according to anyone of claims 1-5, wherein 
each of said secure devices comprises a chip with 
logic circuitry having a function in providing author- 
ization to the holder of a secure device, wherein in 
at least a part of said secure devices, the chip of 
each secure device is provided with a unique chip 
layout. 
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